General
- Target 2026-07-17_aaea3f6ab9c87bf5fe9b395ae7891f7c_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- Sample260718-c2y4tsdv8n
- SHA256 d6588d15d53d408f1a1050edf359b9dce07ca5c931ea3f75a8a194f2598300e3
- MD5 aaea3f6ab9c87bf5fe9b395ae7891f7c
- SHA1 60c46c83a5ea2777883f2069d366b337de17d0c2
- SHA512 e17802ce3102ba22e4ba75b7fbbc91156e0090497c9bb054f1a60ea90fd996c79ef16c72ccad2703f6a6727cf027499975110f04f8f95a60a3d5795aa9cfe239
- SSDEEP 3072:8JWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:8ghLQ0sQmpcF8BzXfwVfAI
- TLSH T1F0344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-17_aaea3f6ab9c87bf5fe9b395ae7891f7c_elex_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba8102
-
http://xytets.com:2345/ll/out.txt
-
http://xytets.com:2345/t.asp?os=home8102
Targets
-
- Target 2026-07-17_aaea3f6ab9c87bf5fe9b395ae7891f7c_elex_redline-stealer_rhadamanthys_stop
- Size 230KB
- SHA256 d6588d15d53d408f1a1050edf359b9dce07ca5c931ea3f75a8a194f2598300e3
- MD5 aaea3f6ab9c87bf5fe9b395ae7891f7c
- SHA1 60c46c83a5ea2777883f2069d366b337de17d0c2
- SHA512 e17802ce3102ba22e4ba75b7fbbc91156e0090497c9bb054f1a60ea90fd996c79ef16c72ccad2703f6a6727cf027499975110f04f8f95a60a3d5795aa9cfe239
- SSDEEP 3072:8JWhLPcg3TC0sQB8BPFvdRcF8rFz1wxayNM3coteYnwrZCkAI9:8ghLQ0sQmpcF8BzXfwVfAI
- TLSH T1F0344A1272808071E7560B78046AE7A14A7E7D344BA5E68FF7A43F795E302D3A93721F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL